Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa
File:                     3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa (raw, json)
Hash identifier:          CRUlP7NlDB4w+5fIZuLbxdvzG28uBkpUjJo/i+vfDUE=
Subject key identifier:   9A:0E:AB:5C:A4:D0:0D:84:C5:6A:17:62:F2:47:63:4E:8F:62:61:B4
Certificate issuer:       /CN=12A120543D4989758BFB0561CAF5C57A23A55B08
Certificate serial:       731278CDB2D31EFFAF971773974CC5BE18C5A871
Authority key identifier: 12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa
Signing time:             Tue 04 Feb 2025 18:53:08 +0000
ROA not before:           Tue 04 Feb 2025 18:48:08 +0000
ROA not after:            Tue 03 Feb 2026 18:53:08 +0000
asID:                     265711
IP address blocks:        192.140.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 14:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:12:78:cd:b2:d3:1e:ff:af:97:17:73:97:4c:c5:be:18:c5:a8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12A120543D4989758BFB0561CAF5C57A23A55B08
        Validity
            Not Before: Feb  4 18:48:08 2025 GMT
            Not After : Feb  3 18:53:08 2026 GMT
        Subject: CN=9A0EAB5CA4D00D84C56A1762F247634E8F6261B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:ad:13:56:ed:db:a6:51:e9:59:8f:03:09:
                    dc:d3:76:ea:4d:fa:f4:a4:8e:2f:27:da:da:d0:0a:
                    96:b4:93:45:1c:72:c7:6c:05:d1:99:1e:af:fa:02:
                    dc:31:48:ac:a1:fe:c4:e5:78:f2:55:02:30:b0:da:
                    ef:dc:ad:6b:9d:85:7f:3b:c9:9a:fa:4e:3c:5f:df:
                    02:4e:b8:bc:85:b9:69:6d:b8:61:54:0d:b4:da:6b:
                    8c:5c:01:40:c8:ae:38:1b:e0:28:06:e9:ec:26:76:
                    0d:de:06:40:5c:7b:6c:1b:4b:48:7a:22:4b:65:e0:
                    c2:1a:b9:2e:91:c2:23:3f:80:6d:16:ea:ec:a1:0c:
                    b7:90:2b:08:98:3f:a4:e8:49:38:cd:ef:0e:06:30:
                    5f:53:ec:f7:aa:d6:0a:c1:07:e6:df:28:29:f8:9d:
                    0a:83:56:2c:8c:d3:76:31:8e:11:8d:32:e7:52:b3:
                    79:6d:2a:68:32:d2:66:77:46:b3:b3:1a:ba:56:70:
                    2f:d5:b1:88:77:ce:3e:6e:64:f5:f2:86:ae:a2:d0:
                    b4:59:0b:dc:38:ec:54:8c:8a:79:fe:a7:3d:94:7d:
                    42:b1:21:75:57:5d:b4:a7:5f:9e:0c:05:f7:24:88:
                    3c:11:a6:ae:8f:cf:2a:c7:33:27:aa:1f:ca:ee:b3:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:AB:5C:A4:D0:0D:84:C5:6A:17:62:F2:47:63:4E:8F:62:61:B4
            X509v3 Authority Key Identifier:
                keyid:12:A1:20:54:3D:49:89:75:8B:FB:05:61:CA:F5:C5:7A:23:A5:5B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/12A120543D4989758BFB0561CAF5C57A23A55B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12A120543D4989758BFB0561CAF5C57A23A55B08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AAA80D3A3F50DCDCB7E38D57F5857012B339C85D0F3EBECEA37E07C499BD4412/0/3139322e3134302e39322e302f32322d3234203d3e20323635373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:b6:67:bb:06:2d:b3:59:b9:dd:a3:68:e1:73:25:e0:b5:
         d9:dd:cb:69:3d:6e:91:8d:94:5d:26:f2:ad:2b:6c:e6:25:36:
         e9:f6:33:d7:f6:c5:e8:6d:21:4f:e8:5e:6a:ca:e3:d2:d6:fe:
         4c:80:f2:44:f6:5d:f2:51:a3:88:7d:77:c2:e0:44:cb:fa:b5:
         2e:23:fe:de:85:9b:ae:cf:dd:c7:7e:e3:e2:e8:8a:16:56:4d:
         10:46:84:9c:bc:32:2c:11:09:ec:b6:f8:1d:53:e3:eb:8e:33:
         84:37:18:f0:f4:76:4f:a8:3b:c0:5e:37:3e:13:8b:8f:a7:10:
         4e:c5:2a:c0:cb:7b:de:67:81:6b:0b:db:e1:c5:ab:35:e8:98:
         7c:76:21:2e:5c:eb:9f:ce:57:ab:a4:51:c8:62:a4:b7:c1:21:
         e2:66:cd:3d:34:56:10:30:9e:74:03:ee:db:bb:98:42:e4:40:
         e3:d0:8f:5d:89:9f:71:da:1f:67:c7:f6:62:2d:02:2e:9b:0a:
         11:0f:52:59:98:ec:f3:be:f9:ba:cc:ff:f4:13:9f:02:76:26:
         35:c5:9e:dc:c3:57:21:63:40:48:60:25:dc:14:95:bc:c4:9f:
         af:78:63:b9:a5:55:02:a5:2d:a7:ef:96:79:01:95:26:ef:ab:
         c0:4b:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:30 2025 by rpki-client